Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/8MfptDaalutsfJ14siMYOstm8Ws.roa
File: 8MfptDaalutsfJ14siMYOstm8Ws.roa (raw, json)
Hash identifier: TfYtp0GC75xM4NsdV+Fqc7w6aV5YUUswSUTgbqV27Is=
Subject key identifier: F0:C7:E9:B4:36:9A:96:EB:6C:7C:9D:78:B2:23:18:3A:CB:66:F1:6B
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019EA80091DA17797324BDB713021C9A16FD
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/8MfptDaalutsfJ14siMYOstm8Ws.roa
Signing time: Mon 08 Jun 2026 16:11:10 +0000
ROA not before: Mon 08 Jun 2026 16:11:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215004
IP address blocks: 176.118.177.0/24 maxlen: 24
2a14:3240::/29 maxlen: 29
2a14:3240:4624::/48 maxlen: 48
2a14:3240:71da::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:00:91:da:17:79:73:24:bd:b7:13:02:1c:9a:16:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jun 8 16:11:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c7e9b4369a96eb6c7c9d78b223183acb66f16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:0d:48:10:bf:d2:58:ae:ba:e1:20:1a:cb:
c8:50:82:01:84:ca:24:aa:78:a7:c6:ed:fa:83:cc:
3d:c5:33:4c:40:d6:73:b6:22:0c:5f:7f:91:53:3d:
9f:e3:9b:8e:a8:fe:e6:0e:42:2b:b2:0e:20:00:ea:
00:a8:a5:1c:3a:5f:02:9e:86:61:6a:ff:d5:ae:fd:
fa:dd:45:20:9c:41:0a:74:35:64:d4:24:48:4e:e5:
1a:d5:80:08:d1:36:7e:fd:0b:5f:18:89:96:02:ff:
54:8d:21:b7:57:78:6f:e0:a3:54:c1:17:39:79:9e:
04:05:3d:94:df:73:5e:27:02:d5:87:ed:b2:3c:73:
5e:d8:cd:35:96:b5:ee:38:6a:17:3b:3a:87:8f:97:
5d:90:5b:34:26:0e:0c:d7:7f:a4:be:22:f5:09:00:
d8:2f:3a:57:36:a9:c3:a6:aa:4b:18:40:65:8d:17:
18:97:6a:48:98:98:0e:69:4e:d8:ac:c6:a1:ab:e2:
2e:e6:1d:63:99:15:7e:1c:3a:af:92:54:bb:e1:cd:
ca:81:07:63:5f:ad:f3:91:6d:65:5a:16:73:85:79:
17:c1:43:1e:71:cb:5c:5f:ba:74:eb:59:dc:ce:e8:
49:99:7f:6e:1d:90:4d:b2:bc:79:c2:f8:ed:e2:7b:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:E9:B4:36:9A:96:EB:6C:7C:9D:78:B2:23:18:3A:CB:66:F1:6B
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/8MfptDaalutsfJ14siMYOstm8Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.177.0/24
IPv6:
2a14:3240::/29
Signature Algorithm: sha256WithRSAEncryption
4f:77:09:3c:a8:70:de:c9:4f:c7:41:2d:71:4d:d1:97:c3:72:
7e:90:bf:b9:bd:1a:39:d5:e3:d9:6d:03:91:81:6f:fa:89:67:
22:81:ba:e0:16:3d:ef:69:68:0e:a1:61:2e:a7:9c:dc:1c:ea:
90:a8:b5:6a:cc:51:19:c9:3c:71:89:55:50:49:d4:db:b5:a5:
4e:1a:a6:b5:c7:97:51:ea:39:60:41:df:13:d3:a6:97:70:ab:
62:53:ab:b0:36:51:fc:2e:8d:0d:45:58:b0:ec:b9:7b:f1:d8:
b3:71:0d:ff:0a:4a:94:62:2a:db:dd:ea:c6:8d:f1:9c:46:01:
ce:8b:e9:1b:cc:46:46:b1:72:c7:30:c6:16:11:c6:76:b8:39:
81:3e:5a:f2:0b:1b:40:b9:c5:08:df:a1:58:4a:51:ac:1a:c2:
a6:63:34:0f:26:e1:a4:68:75:6a:c5:c7:b0:43:2c:2a:ac:25:
17:c2:7d:79:f5:af:7b:0d:dc:4a:0f:f6:67:f4:26:a9:75:e2:
72:57:4a:da:cf:75:f2:8c:e2:bb:5c:70:92:07:d5:cf:e4:ce:
0c:c2:92:55:4a:e1:69:94:5c:81:98:bb:68:34:4f:4c:b4:d0:
9e:28:77:04:e1:a4:03:90:77:cf:9c:31:38:a8:38:f1:a0:3c:
ef:3a:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:34 2026 by rpki-client